Known CVE

WordPress OrderConvo < 14 - Path Traversal

WooCommerce OrderConvo WordPress plugin \u003C 14 contains a path traversal vulnerability caused by improper validation of file download paths, letting unauthenticated attackers read or download arbitrary files remotely

CVE-2025-10162

High2025CVSS 7.5CWE-22

cve2025 · wp · wp-plugin · wordpress · woocommerce · orderconvo · wooconvo · lfi

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website